Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB9EAAACDB0011EF8E75DF84762E951A.roa
File:                     FB9EAAACDB0011EF8E75DF84762E951A.roa (raw, json)
Hash identifier:          petgwhSQfc9GrO/FFWTLBu7ONqaL/fik4FYcL+G+fe0=
Subject key identifier:   D0:5B:03:CE:E3:A8:C3:AE:8F:14:BC:55:4E:50:39:F6:D5:AA:BC:A0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0111C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB9EAAACDB0011EF8E75DF84762E951A.roa
Signing time:             Sat 25 Jan 2025 09:44:34 +0000
ROA not before:           Sat 25 Jan 2025 09:44:30 +0000
ROA not after:            Sun 23 Feb 2025 09:44:30 +0000
asID:                     202656
IP address blocks:        45.192.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70085 (0x111c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 25 09:44:30 2025 GMT
            Not After : Feb 23 09:44:30 2025 GMT
        Subject: CN=6794b282-ef72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:32:b5:d4:a1:17:d4:45:c0:de:65:a7:30:7a:
                    5a:af:a8:e5:d1:7a:5a:42:c8:ca:e0:32:6d:c9:a4:
                    9c:aa:cf:6d:8b:fe:15:54:b3:77:53:db:2a:68:d9:
                    5f:2b:ea:85:fe:6f:ff:06:99:31:94:1e:88:4b:6b:
                    3c:5e:e0:6f:01:60:ab:8e:b8:8f:cd:fc:02:d0:94:
                    a3:ce:ad:e5:7d:c6:d0:02:36:40:13:8f:52:ad:8e:
                    cf:e0:29:0c:4c:8d:0d:63:26:b8:0b:da:26:70:8d:
                    9b:dc:28:04:5a:4c:a7:ea:69:ae:59:65:b4:44:27:
                    36:55:7a:aa:09:10:6f:df:bb:d4:83:15:33:11:3d:
                    97:dd:6a:39:59:83:17:cf:54:d1:88:14:07:d2:20:
                    c9:6e:ac:68:36:d9:94:39:64:d3:e5:21:b2:29:98:
                    91:00:9f:6e:d3:cb:1b:b2:2c:e6:b9:24:f6:13:6f:
                    22:37:de:bb:3e:11:3c:08:7a:30:21:d5:8c:65:0e:
                    66:13:ee:6a:38:5e:f6:9b:72:cc:14:22:3d:87:fa:
                    9e:de:82:d1:51:21:68:78:2c:ad:ab:c6:20:7c:c5:
                    f1:cc:81:7f:b3:02:6a:25:14:97:c7:0b:fe:0f:be:
                    87:8d:30:2f:f9:c3:7c:8f:f9:80:73:62:b9:18:2c:
                    05:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5B:03:CE:E3:A8:C3:AE:8F:14:BC:55:4E:50:39:F6:D5:AA:BC:A0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB9EAAACDB0011EF8E75DF84762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:02:20:bb:d3:ae:28:08:cd:05:a9:1d:4a:3e:52:50:12:d0:
         8f:ed:24:7d:47:2c:ef:a0:fa:7a:bc:51:c1:6a:ae:ba:56:b9:
         50:ba:db:0a:1a:45:24:d1:a0:56:cd:b2:00:4e:6a:e2:4b:77:
         dc:9b:e6:10:51:a5:a0:04:19:20:2d:b7:bb:7f:8f:ad:be:f1:
         07:ee:47:30:4a:82:ea:d0:ee:1d:27:34:15:a9:b5:22:f6:5d:
         41:91:a0:a9:90:55:1a:a2:e6:21:58:07:5b:9b:70:90:6b:b8:
         f6:5f:dd:1c:73:e5:8d:3f:18:6c:75:e0:7f:84:72:83:d2:6f:
         5b:62:c9:de:09:8e:7d:7d:66:06:b0:89:13:0c:de:1e:96:87:
         d7:ed:b9:84:fb:d8:42:1a:fa:39:53:80:a3:cb:e6:44:6d:fd:
         50:db:57:73:99:ea:03:10:55:7b:e6:1c:a0:af:e5:b6:eb:37:
         3e:84:30:03:01:72:5b:a7:6b:19:5f:8d:82:71:fa:29:b6:c0:
         77:0f:bc:3b:2e:a4:6b:38:5c:39:76:48:a2:d3:36:99:f4:e3:
         86:11:6f:0a:52:c4:12:e1:dc:1d:5c:f3:b3:f4:bd:80:ea:03:
         61:15:a2:79:1a:1e:1c:2c:d4:e9:b4:62:3e:f6:27:be:0c:7e:
         92:e4:11:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:07:26 2025 by rpki-client